"ccrowley" <[EMAIL PROTECTED]> wrote in message 
news:[EMAIL PROTECTED]
>
> All -
>
> Just a quick inquiry.  I updated from 3.1.3 to 3.1.7 yesterday. I'm seeing
> substantially higher LA on the system.  The system used to run at a range 
> of
> 2.x - 8.x LA.  With 3.1.7 I'm seeing 10.x  - 50.x.
>
> I'm in the process of reverting to see if the behavior persists or is
> eliminated.  But, I thought to check to see if anyone else has experienced
> similar behavior?

I have had the same problem.. I run EXIM, SA & ClamAV on my server and after 
almost 2 weeks of constant baby sitting I found a rule that helped 
tremendously to kill it as it hit the box..

In the exim.conf file, ACL section I added the deny dnslists command:

  accept
    condition = \
      ${lookup {${lc:$sender_address_domain}} partial-lsearch 
{/etc/whitelist_senders} \
               {yes} {${lookup {${lc:$sender_address}} lsearch 
{/etc/whitelist_senders} \
                               {yes} {no} }} }

deny dnslists = blackholes.mail-abuse.org : \
                dialups.mail-abuse.org
  accept
    dnslists = dsn.rfc-ignorant.org/$sender_address_domain

  require
    message = "This message is from a non-existant email address."
    verify = sender/callout=defer_ok

  accept



Since doing this little trick, I am consistently running under 1% loads and 
the mail queue has stopping filling up. Immediately after that however yahoo 
decided (probably because of the influx of spam to yahoo accounts from 
server user accounts -- not enuf caffeine hope that made sense) decided to 
delay all mail from the server to yahoo accounts. that has been a 3 day 
battle which I believe is over now..  I freaked at first because I thought 
this dnslists did that, so I removed it and saw the same 451 delay codes on 
all yahoo mails in the queue, so decided it was not the cause.. the quantity 
of spams reaching yahoo accounts must have been huge..



Reply via email to